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@ Apparatus and methods for providing design advice. 



(^7) A knowledge-based artificial intelligence sys- 
tem which provides design advice. The artificial 
intelligence system includes a knowledge base 
of design information. Users of the system indi- 
cate an area about which they require design 
advice. The system provides the relevant advice. 
Included in the advice is an indication of the 
owner' of the advice. The advice and the 
relationship between the design made by the 
user are part of a trace of the users' session with 
the system. The trace becomes part of a design 
document for the design. When the design is 
reviewed, the trace is reviewed as well. The 
system includes an interface for updating the 
knowledge base, and if the design review indi- 
cates a need to correct the knowledge base, the 
corrections are made using the Interface for 
updating. A preferred embodiment of the sys- 
tem is used to provide advice to designers of a 
large software system concerning the use of an 
en-or reporting and handling system in the sys- 
tem being designed. 
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Background of the Invention 

Field of the Invention 

This invention relates to information systems that 
produce advice about a design domain in order to help 
someone designing in the domain. Such systems pro- 
duce advice by using a "knowledge base" in which in- 
formation relevant to designing in the domain is stor- 
ed. Typical domains include the design of software, 
integrated circuits, mechanical devices, and build- 
ings. 

Description of the Prior Art 

Knowledge-based technology is central to the 
field of artificial Intelligence and various application 
areas that evolved from it (Readings in Knowledge 
Representation, edited by Ronald J. Brachman and 
Hector J. Levesque, Morgan-Kauffmann, 1985). This 
technology has three facets. First are techniques for 
representing knowledge about the domain (such as 
configuring computer components) in a computer. Is- 
sues of succinctness and completeness arise in the 
representation of domain knowledge. The second fac- 
et Is access, techniques for presenting and making 
accessible appropriate knowledge at appropriate 
times. The third facet can be called update, mainte- 
nance, or evolution; it involves the ability to change 
the knowledge in response to new or unanticipated 
conditions in the domain. Note that how the knowl- 
edge is represented can greatly impact the second 
and third facets of knowledge-based technology. 

An important application area for knowledge-ba- 
sed technology is the area of design (Report on DAR- 
PA-Sponsored Workshop on Design, edited by Saul 
Amarel, Technical Report no. LCSR-TR-160. Depart- 
ment of Computer Science, Rutgers University, April. 
1991). Design is an important engineering activity 
where objects and artifacts are either designed from 
scratch or modified (re-design); these objects and ar- 
tifacts can be physical objects (integrated circuits, 
bridges), non-physical objects (software, software 
systems), or even processes (for chemical engineer- 
ing, manufacturing). The process of design usually in- 
volves or results in external representations of the ob- 
jects and artifacts, such as blueprints, scale models, 
or block diagrams. Design is very knowledge-inten- 
sive: it requires knowledge of the engineering do- 
main, relevant problem-solving knowledge, common 
sense knowledge, and knowledge of the tools and 
techniques for external representation. It is very often 
the case that a large part of the required body of 
knowledge is only available in the heads of experts in 
the area and is not written down in any comprehen- 
sive fashion. This makes it difficult for novices in the 
area, or experts unfamiliar with a sub-domam. to lo- 
cate, understand, and apply design knowledge rele- 



vant to a particular design situation. 

New technology has resulted in automation of 
some parts of engineering design, in particular, com- 
puter-based graphics workstations for accessing and 
5 manipulating the artifacts of design. However, very lit- 
tle work has been done in actually assisting the de- 
sign process by providing access to design knowl- 
edge. Such knowledge remains as organizational 
"folklore", or represented in voluminous documents 
10 which only provide a primitive indexing ability. An al- 
ternative approach, the subject of this patent, is to co- 
dify design knowledge in a knowledge base and, 
equally important, provide mechanisms for a user to 
access that knowledge at relevant portions of the de- 
15 sign process and provide mechanisn>s for the main- 
tenance of the knowledge in the knowledge base. 

Assuming the viability of such an approach, a 
number of important benefits will result. First of all. 
the availability of appropriate design knowledge will 
20 improve the design process and produce superior de- 
signs. Second, the codification of design knowledge 
will allow that knowledge to be efficiently disseminat- 
ed and re-used, again improving the overall design 
process within an organization. Third, if a mechanism 
25 of updating the design knowledge, also called knowl- 
edge maintenance, can be integrated in an organiza- 
tion, this knowledge will remain current and relevant 
as design situations change. 

This latter issue of knowledge maintenance is 
30 particularly critical in design. Unlike medical diagno- 
sis or computer configuration domains, the body of 
relevant design knowledge is both harder to get 
righr initially and will change because of changing 
engineering standards and practices and organiza- 
35 tional changes. In addition, the engineering design 
process is often a process of re-design of existing de- 
sign objects, and thus is very dependent on the 
changing state of those objects. This further increas- 
es the importance of knowledge maintenance. 
40 One recent organizational development that can 

ease the maintenance problem is the so-called "qual- 
ity revolution" in commerce and industry. This move- 
ment emphasizes a variety of organizational changes 
resulting in the notion of an organizational process, 
45 Each organizational process can be viewed as dis- 
creet unit with a number of inputs (customer re- 
quests), outputs (organizational products), and vari- 
ous feedback loops which can be used to evaluate the 
effectiveness of the process. A process can be fur- 
so ther divided, in a hierarchical fashion, into sub-proc- 
esses. One of the many benefits of this viewpoint is 
that a process or sub-process can have an owner 
designated, providing a single point of contact for 
evaluating and modifying the process. The idea of or- 
55 ganizational process can be used to address the 
problem of maintenance of a design knowledge base 
if the maintenance problem can be integrated into a 
new or existing organizational process. 
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Summary of the Invention 

The above object is achieved by apparatus for 
producing advice about a design and for annotating 
designs with the advice produced. Advice is informa- 
tion about the design domain relevant and useful to 
the design. The apparatus Includes 
. a design document; 

, a knowledge base for producing information 

relevant to designing in a particular domain; 
. means for a designer to request access to the 

information in the knowledge base; 
. means for the system to assemble advice in re- 
sponse to the designer's request; 
. means for identifying the "owner" of each piece 

of information in the knowledge base; and 
. means to annotate designs with a trace of the 
advisory interaction, including system ques- 
tions, user responses, and system advice. 
It is an object of the invention to provide design- 
ers with improved access to information. 

It is a further object of the invention to support the 
ongoing evolution of the information in the knowledge 
base, as new knowledge is generated and as the in- 
formation already in the knowledge base is found in- 
adequate. 

It is an additional object of the invention to sup- 
port and focus commmunication among designers, 
both decreasing the need for communication, and. 
when communication still Is required, ensuring that it 
occurs directly between a designer who needs help 
and a designer who can give the help. 

These and other objects and advantages of the 
invention will be apparent to those of ordinary skill in 
the art after perusing the Detailed Description and 
Drawing, wherein: 

Brief Description of the Drawing 

Figure 1 illustrates the overall structure of the in- 
vention; it includes the principal components of 
each of the mechanisms in the emt>odiment and 
how the mechanisms are employed in the design 
process: 

Figure 2 illustrates the structure of the knowl- 
edge base in a preferred embodiment: 
Figures 3 and 4 illustrate two methods of interact- 
ing with a designer to obtain input required to ac- 
cess relevant information in the knowledge base: 
Figure 5 illustrates the process of computing ad- 
vice in a preferred embodiment: and 
Figure 6 illustrates a partial trace of an interaction 
with an application of the apparatus and methods 
applied to the domain of software design. 

Detailed Description 

The following Detailed Description begins with an 



overview of the invention and then proceeds to a de- 
tailed description of a preferred embodiment thereof. 

Overview of the Invention: Figure 1 

5 

Figure 1 shows an artificial intelligence system 
102 embedded in a larger design process 101. The 
artificial intelligence system includes a knowledge 
base of design information and is implemented using 
10 the present invention. The major components are the 
following: 

. Design Knowledge Base (DKB) 104 contains 
the information about designing in a particular 
domain used to produce design advice; 
15 . Design Assistant 103 is a computer program 

that interacts with a designer to give the de- 
signer access to relevant information from DKB 
104. Design Assistant 103 consists of two 
parts, a Query Provider QP and an Advice Pro- 
20 viderAP. 

. Maintenance Assistant 105 is a computer pro- 
gram that interacts with a knowledge base 
maintainer to add new information to DKB 104; 
. The Annotated Design Document 106 consists 
25 of three parts: 

. Design 107 - a specification of the product 
to be built; 

. Trace of interactions with the Design Assis- 
tant 1 08 - shows the advice given by Design 
30 Assistant 103. in particular, the features of 

the Design 107 due to advice produced 
from DKB 104; 
. Suggested updates to Design Knowledge 
Base 109 - information that a designer be- 
35 lieves shouldd be added to DKB 104. 

The operation of system 102 within the organiza- 
tional process 101 is as follows. While constructing a 
Design 107, a designer interacts with the Query Pro- 
vider QP part of Design Assistant 103 by providing 
40 user input Ul 117. On the basis of this interaction. De- 
sign Assistant 103 queries DKB 104 with Query 119 
to access design information relevant to the designer. 
The DKB 104 provides Design Information Dl 123 to 
the Design Assistant 103. The Advice Provider AP 
45 part of the Design Assistant presents the relevant in- 
formation as Design Advice DA 121 to the designer as 
advice. Each item in the advice is labeled with the 
-owner" of the advice. This advice becomes an anno- 
tation 108 to the Annotated Design Document 106. In 
50 addition, designers may suggest additions to or mod- 
ifications of DKB 104 where they believe it to be in- 
complete or incorrect. These suggestions 109 also 
become partof the Annotated Design Document 106, 
The Annotated Design Document 106 is then 
55 subject to a Review 111. The Review 111 is a meeting 
in which a group of experienced designers in the rel- 
evant domain examine the Annotated Design Docu- 
ment 106 to look for problems with the design. The 
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presence of the trace of design advice 108 and sug- 
gested updates to the knowledge base 109 is crucial 
in supporting the evolution of DKB 104. The trace 108 
makes problems in the design due to advice based on 
incorrect information in DKB 104 apparent. The sug- 
gested updates 109 also are judged to see if they are 
consistent with the reviewers' knowledge and may be 
extended or modified based on the reviewers*exam- 
ination of the Annotated Design Document 106. 

After the Review 111, the Annotated Design 
Document 106 is given to a human knowledge base 
maintainer. The process of KB Maintenance 112 in- 
volves the knowledge base maintainer interacting 
with a Maintenance Assistant program 105 to update 
DKB 104 based on the modifications and additions 
discovered to be necessary during Design 110 and 
Review 111 and recorded on the Annotated Design 
Document 106. For each update of the knowledge 
base, the person who suggested that update (the 
"owner") is associated with the new item in the knowl- 
edge base. 

Detailed Description of the Structure and 
Operation of the Invention 

We first describe the organization of information 
in the Design Knowledge Base (DKB) 104, The DKB 
104 must contain information that is relevant to the 
task of designing in a particular domain. The combin- 
ation of the organization of information in DKB 104 
and the wording of the Design Assistant 103 must al- 
low designers easy access to relevant design infor- 
mation. In a preferred embodiment, the DKB 104 con- 
tains the following major components (see Figure 2): 
, A hierarchy of Design Descriptions 201; in the 
area of software design, for example. Design 
Descriptions might include "Designs that con- 
sume too many resources" and "Designs that 
send too many messages"; the second De- 
scription would be a specialization of the first; 
. A set of Design Decisions 202, indexed by De- 
sign Description; in the area of software de- 
sign, for example, a Design Description nrtight 
be "Should I define a new process or use an ex- 
isting process?"; and 
. A set of Advice Items 203, indexed by Design 

Description and Design Decision. 
The meaning of these components is as follows: 
IF a Description Descr 'S determined to be true 
of a design D, 

AND Descr indexes the Decisions D^ Dn, 

AND each <Descr. D, (Isi'^N) indexes the Ad- 
vice Items A.I ...A m 

THEN the advice items A,j P^ m ^h.\ ^nm 

are relevant to the design D. 

There are three additional aspects to the repre- 
sentation of design information: 

. Advice items are labeled as either primary or 



secondary: 

. Advice items may be labeled as overriding; and 
. Design Descriptions have an associated estab- 
Ushing question. 
5 The use of this information is discussed below. 

In a preferred embodiment, we use CLASSIC 
(LA. Resnick, The CLASSIC User's Manual", AT&T 
Bell Laboratories Technical Report, 1991; R.J. Brach- 
man, A. Borgida, D.L. McGuinness, P.F. Patel- 
10 Schneider, and L.A. Resnick. "Living with Classic: 
How and When to Use a KL-One-like Language", in 
J.Sowa, ed.. Principles of Semantic Networks: Ex- 
plorations in the Representation of Knowledge; Mor- 
gan-Kauffmann. 1991. pp. 401-456.) as the language 
15 for representing the design information described 
above. The abstract, pictorial presentations of design 
information shown in Figure 2 are realized in CLASS- 
IC as follows: 

. each Design Description 201 is a CLASSIC 
20 concept the CLASSIC relationships parent 

and child are used to represent the hierarchy; 
. each Design Decision 202 also is a CLASSIC 
concept; 

. each Advice Item 203 is a CLASSIC individual; 
25 - the index relationships among Design Descrip- 

tions, Design Decisions, and Advice Items are 
represented by CLASSIC roles, which simply 
are a means for stating a relationship between 
two objects; and 
30 . roles also are used to represent the additional 

features of the representation identified above: 
primary vs, secondary, overriding, and estab- 
lishing questions. 
Figure 2 also contains an example showing more 
35 precisely how Design Descriptions 201 . Design Deci- 
sions 202. and Advice Items 203 are related. In the 
example, the nodes in the tree 205 indicate Design 
Descriptions 207, ovals 209 indicate Design Deci- 
sions, and text of the form "A-N" 211 indicates an Ad- 
40 vice Item. The indexing relationship is shown infor- 
mally, by the position of Descriptions. Decisions, and 
Advice Items. Relationships shown in the example in- 
clude 

. Descr-1 indexes Decision 1; 
45 . <Descr-1, Decision 1>indexes A-1; 

. Descr-6 indexes Decision 3; and 

<Descr-6. Decision3>indexes A-15 and A-16. 
We next discuss the interaction of the Design As- 
sistant 103 with a designer, illustrating 
50 . how the interaction gives the Design Assistant 

103 sufficient information to access relevant 
information in the Design Knowledge Base 
104: and 

. how the Design Assistant 103 computes advice 
55 based on the interaction with the designer. 

The goal of the interaction is to get the designer 
to classify his or her design under the most specific 
relevant Design Description: this results in the most 
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specific possible advice. We describe two preferred 
embodiments for engaging n such an interaction with 
the designer. The first embodiment, given in figure 3. 
is preferable for very small description hierarchies: 
the second embodiment, given in figure 4, is prefer- 
able for all larger hierarchies. We call the algorithm 
GET-DESIGNER -TO-CLASS I FY- DESIGN. Note that 
the hierarchical representation of Design Descrip- 
tions allows for an economical representation of ad- 
vice; advice common to a number of Descriptions can 
be represented at a common parent Description. Ex- 
ceptions to this general advice can be labeled as be- 
ing overriding. Overriding advice cancels out or over- 
rides more general advice and replaces the general 
advice when the advice is presented. For example, in 
figure 2, Advice Item A-1 3 overrides Advice Item A-9. 
and Advice Item A-1 8 overrides Advice Item A-1 8. If 
Description Desc-6 is found to be relevant. Advice 
Item A-1 3 would be presented to the user and Advice 
Item A-9, which relates to the save Design Decision, 
would not be presented. Likewise, if Description 07 
was found to be relevant. Advice Item A-18 would be 
presented to the user and Advice Item A- 12 would not 
be. 

After obtaining this information from the design- 
er, the Design Assistant 103, uses algorithm COM- 
PUTE-ADVICE (shown in Figure 5) to compute the 
advice that is relevant to the design being construct- 
ed. In addition to presenting the advice to the design- 
er, the Design Assistant also produces a trace of the 
advisory interaction, including the advice produced. 
This trace 108 then becomes part of the Annotated 
Design Document 106. 

The Annotated Design Document 106 then is ex- 
amined in the Review 111, In particular, the parts of 
the design due to the advice generated from the DKB 
104 will be examined. Any modifications of or addi- 
tions to the information in the DKB 1 04 detected dur- 
ing the Design 110 and Review 111 processes will be 
examined by a knowledge base maintainer. During 
the process of KB Maintenance 112, the knowledge 
base maintainer will use the Maintenance Assistant 
program 105 to integrate these modifications and ad- 
ditions into the DKB 104. 

Application of the Techniques to Software 
Design 

The described apparatus and methods for provid- 
ing design advice have been applied to the domain of 
software design. The specific domain is the use and 
a particular error reporting and handling mechanism 
that is used in a software program. 

A hierarchy of design descriptions relevant to this 
error reporting mechanism has been represented in 
a knowledge base. A set of design decisions relevant 
to the above mentioned error mechanism have been 
represented and indexed by design description, Final- 
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ly, a set of advice items relevant to the use of the error 
mechanism has been represented and indexed by de- 
sign description and design decision. These advice 
items are labelled as either primary or secondary; 
5 some are labelled as overriding; and owners of the 
advice items are stored. 

Adesign assistant was created which uses the al- 
gorithm shown in figure 3 to obtain information from 
the designer. The design assistant then uses the ai- 
re gorithm shown in figure 5 to compute the advice rel- 
evant to the design being constructed. The advice is 
presented to the designer and a trace of the interac- 
tion of the designer with the design assistant is pro- 
duced. This trace becomes part of the design docu- 
15 ment as described in this application. Figure 6 illus- 
trates a Partial Trace 601 of this system, DKT prob- 
lem question 603 is presented to the user, tf the user 
response is -yes", then Design Advice 605 is present- 
ed to the user, consisting of Primary Advice 607 and 
20 secondary advice 609. 

Conclusion 

The foregoing Detailed Description has disclosed 

25 to those skilled in the arts to which the invention per- 
tains how one may make and use a system for deliv- 
ering design advice and evolving the knowledge base 
from which the advise is generated. Other techniques 
that those disclosed herein for practicing the inven- 

30 tion and other areas in which the invention may be ap- 
plied will be apparent to those skilled in the arts con- 
cerned after reading the foregoing disclosure. For ex- 
ample, CLASSIC could be replaced by other repre- 
sentation languages. 

35 In addition, while the interaction of the Design As- 

sistant and the designer described here is based on 
the Design Assistant asking a question, getting the 
designer's answer, then acting on the basis of the an- 
swer, other methods of interaction would be even 

40 more appropriate in other circumstances. For exam- 
ple, if the Design being produced is a formal object, 
the Design Assistant could apply rules of inference di- 
rectly to the design in order to classify it, rather than 
querying the designer. Further, advice could be de- 

45 livered in many different ways, for example, combin- 
ations of text graphics, video, etc. 

Claims 

50 

1. Apparatus for providing advice about a design, 
the apparatus characterized by: 
a design document; 

a knowledge base (104) for producing in- 
55 formation about a domain relevant to the design 

in response to a query; 

query providing means (OP) for producing 
the query in response to a specification of an ad- 
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vice area by a user and providing the query to the 
knowledge base: and 

advice providing means (AP) responsive 
to the information produced in response to the 
query for employing the information to provide an 5 
annotation for the design document which in- 
cludes the advice. 

2. The apparatus set forth in claim 1 further charac- 
terized in that: io 8. 

the information has an owner, and 
the advice includes the owner of the infor- 
mation employed in providing the advice. 

3. The apparatus set forth in claim 1 further charac- is 
lerized in that: 

the advice providing means further in- 
cludes means (Fig. 3) permitting the user to indi- 
cate that the user has not accepted the advice; 
and 20 

the advice providing means further in- 
cludes an indication (108) that the user has not 9. 
accepted the advice in the annotation. 

4. The apparatus set forth in claim 1 further charac- 25 
terized by: 

means (105) for updating the knowledge 
base with additional information based on a re- 
view of the annotation. 

30 

5. The apparatus set forth in claim 1 further charac- 
terized in that: 

the knowledge base includes 
a hierarchy (201) of design descriptions, 
a set (202) of design decisions indexed by 35 
design descriptions, and 

a set (203) of advice items indexed by de- 
sign decision and design description; and 

the knowledge base produces the infor- 
mation by locating a design description corre- 40 
sponding to the advice area, locating a design de- 
cision indexed by the design description, locating 
an advice items indexed by the located design 
descriptbn and the located design decision, and 
producing the located advice item in response to 45 
the query. 



terized in that: 

the advice items include an overriding ad- 
vice item (A- 18, A- 13); and 

when the knowledge base locates t>oth an 
overriding advice item and another advice item 
which is not an overriding advice item, the knowl- 
edge base produces the overriding advice item 
as the located advice item. 

The apparatus set forth in claim 5 further charac- 
terized in that: 

the advice items include primary advice 
items (607) and secondary advice items (609); 
and 

the knowledge base indicates whether a 
located advice item is a primary advice item or a 
secondary advice item; and 

the advice providing means indicates 
whether the provided advice is primary or sec- 
ondary advice. 

The apparatus set forth in claim 7 further charac- 
terized in that 

the apparatus further includes 
means (105) for updating the knowledge 
base; and 

the means for updating the knowledge 
base updates the knowledge base with additional 
information based on a review of the annotation 
which includes an indication of whether an advice 
item is overriding. 



6. The apparatus set forth in claim 5 further charac- 
terized in that: 

at least one of the design descriptions has so 
an establishing question (603) associated there- 
with; and 

the query providing means provides the 
establishing question to the user; and 

the user makes the specification of the ad- 55 
vice area by answering the establishing question. 



7. The apparatus set forth in claim 5 further charac- 
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FIG. 3 



ALGORITHM GET-DESIGNER-TO-CLASSIFY-DESIGN - Version 1 

This version is appropriate for very small description hierarchies, say with fewer 
than 10 leaf nodes. 

1. For each leaf node Dl in the hierarchy of Design Descriptions, retrieve the 
establishing question EQ for Dl. (EQ is a piece of natural language text that asks 
a yes*no question.) 

2. Present EQ to the designer. The designer must answer yes or no. 

3. IF the designer answers yes, then 

• the Description Dl describes the design D. 

• Use algorithm COMPUTE- ADVICE (shown in Figure 3) to compute 
the advice relevant to Dl. 

• Present the advice to the designer. 

• Create a trace of the interaction, to appear as part of the Annotated 
E^ign Document 106. 
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FIG. 4 



ALGORTTHM GET-DESIGNER-TO-CLASSIFY-DESIGN - Version 2 

1. Initialize Dcunrm to NULL. 

2. Initialize Dpo«jibk to be a set coniainiiig only the root node Dr of the hierarchy of 
Design Descriptions. 

3. For each description Dp in Dpojnbk. retrieve the establishing question EQ for Dp 

4. Present each EQ to the designer. 

5. The designer may select at most one Dp as describing the design D. 

6. IF the designer selects a Dp from Dpo„ibie, then 

• the Description Dp (a specialization of Dcmrwit) describes the design D. 

• IF Dp IS a leaf node, then 

• Use algorithm COMPUTE-ADVICE (shown in Hgure 3) to 
compute the advice relevant to Dp. 

• Present the advice to the designer. 

« Create a trace of the interaction* to appear as pan of the 
Annotated Design Document 106. 

• ELSE (Dp is not a leaf node) 

• Set Dcurreni tO bC Dp. 

• Set Dpo^bi^ to be the children of Dcurrem- 

• GOTO step 3. 

7. ELSE (noi» of the descriptions in DpbMibto describe the design D) 

• IF Dcui«Qt ^ NULL, THEN 



• Use algorithm COMPUTE-ADVICE (shown in Figure 3) to 
compute the advice relevant to Dcurmit • 

• Present the advice to the designer. 

• Create a trace of the interaction, to appear as part of the 
Annotated Design Document 106. 
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FIG. 5 



ALGORITHM COMPUTE- AD VICE (D«c») 

1. Initialize Current- Description to Descr; initialize ADVICE to the empty set 

2. Set DC to the set of decisions indexed by Current-Description. 

3. For each decision DCi in DC, 

• For each Advice Items Alij indexed by DCi 

• Unless there already is an Advice-Item AImsp in ADVICE 
such that 

• AImsp is indexed by DCi AND 

• AImsp is labeled as overriding 
add Alij to ADVICE. 

4. IF Current-Description has a parent description, THEN 

• set Current-Description be the parent of Current-Description. 

• GOTO step 2. 

5. Sort the advice items in ADVICE so that all the advice items labeled primary 
come before all those labeled secondary. 

Notice that step 3 ensures that if an advice item is labeled as overriding, any advice 
items for the same decision indexed by descriptions higher in the description 
hierarchy wiU not appear as part of the advice. This is because the algorithm 
COMPUTE-ADVICE considers descriptions from most specific Oowest in the 
hierarchy) to least specific (highest in the hierarchy). 
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DKT PROBLEM QUESTION: ^ 
In your design, do you deal with situations where parameters passed to functions 
are processed and their bounds checked? ^ 

USER RESPONSE: yes 

You should consider an Assert for a situation of this kind. Here is some advice that 
should be followed if you choose to assert: 



PRIMARY ADVICE: 
DATA TO DUMP: 



ESCALATION: 
MACRO TO USE: 

j 

RECOVERY ACnON: 



AUDIT: 

SECONDARY ADVICE: 
ASSERT C USE: 



Explicitly dump the parameters only if they are 
in<Urect (pointers) - like message ids and message 
stnicture pointers. 
Never escalate. 

Almost certainly use Assert macro B 1 , B2. or B3 

(But see 'ASSERT C USE* below). 

Use an RPI (Return to Point of Sender), unless this 

error condition is unrecoverable. In this case, use an 

SPP (Single Process Purge). 

Do not schedule an audit 
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LIMIT ROP OUTPUT 



In very rare circtimstances, a running 
process other than the current process should 
be purged. Use assert macro C if this applies. 
DUMPING ENOUGH DATA: 

It is very important to dump ail the pieces 
of data to debug and solve the problem 
you are asserting for. 

ROP output is somewhat important; all other 
things consideml, it should be minimized. 
MACRO DATA INFORMATION: 

Use of the macros B 1, B2 or B3 depends on 
the amount of data you want to dump. Macro 
Bl will dump 1 buffer of 160 bytes. Macro 
B2 will dump 2 buffers of 160 bytes. Macro 
B3 will dump 3 buffers of 160 bytes. 
If appropriate, pack the data for output This 
will also impact your choice of macro. For 
example, if you want to dump 3 integers, you 
can pack them together and use macro B 1 . If 
you have 3 structures, however, consider 
dumping them each independently with 
macro B3. 
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PACKING DATA: 
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@ A knowledge-based ; artificial intelligence sys- 
tem which provides design advice. The artificial 
intelligence system includes a knowledge base 
of design information. lUsers of the system indi- 
cate an area about which they require design 
advice. The system provides the relevant advice. 
Included in the advice is an indication of the 
owner* of the advice. The advice and the 
relationship between the design made by the 
user are part of a tracejof the users' session with 
the system. The trace becomes part of a design 
document for the design. When the design is 
reviewed, the trace is reviewed as well. The 
system includes an interface for updating the 
knowledge base, and if the design review indi- 
cates a need to correct the knowledge base, the 
corrections are made using the interface for 
updating. A preferred embodiment of the sys- 
tem is used to provide advice to designers of a 
large software system concerning the use of an 
en^or reporting and handling system in the sys- 
tem being designed. 
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